Tra Cuu Phat Nguoi
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This skill matches its stated traffic-fine lookup purpose, with the main thing to notice being that plate details and an optional phone number are sent to a third-party VNeTraffic endpoint.
Before installing, be aware that lookups contact vnetraffic.org rather than an official government portal. Do not provide a real phone number unless needed, and treat returned results as preliminary until confirmed on official CSGT or registry sources.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
66/66 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A license plate and possibly a real phone number may be shared with vnetraffic.org, which the skill itself describes as an intermediate, non-official source.
The lookup sends vehicle plate data and a phone field to a third-party endpoint; this is aligned with the stated lookup purpose, but users should understand that the data leaves the local environment.
const payload = { type: typeCode, bsx: normalizePlate(plate), sdt: phone || '0900000000' }; ... const url = 'https://vnetraffic.org/wp-json/custom/v1/tra-cuu-csgt';Use the lookup only if comfortable sharing that data with the third-party site, avoid providing a real phone number unless necessary, and verify important results through official CSGT or registry portals.